{"id":86642,"date":"2020-06-27T19:42:50","date_gmt":"2020-06-27T17:42:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux"},"modified":"2020-06-27T19:42:50","modified_gmt":"2020-06-27T17:42:50","slug":"vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","title":{"rendered":"LKRG 0.8 v\u00e4ljaanne Linuxi tuuma haavatavuste \u00e4rakasutamise kaitseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Openwall projekt <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lists\/announce\/2020\/06\/25\/1\">avaldas<\/a><\/noindex> tuuma modul <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lkrg\/\">LKRG 0.8<\/a><\/noindex>  (Linux Kernel Runtime Guard) on loodud tuvastama ja blokeerima r\u00fcnnakuid ning tuuma struktuuri terviklikkuse rikkumisi. N\u00e4iteks v\u00f5ib moodul kaitsta volitamata muudatuste tegemise eest t\u00f6\u00f6tavas tuumas ning kasutaja protsesside \u00f5iguste muutmise katsete (exploitide rakendamise m\u00e4\u00e4ramine) eest. Moodul sobib nii teadaolevate Linuxi tuuma exploitide kaitsmiseks (n\u00e4iteks olukordades, kus s\u00fcsteemis on tuuma uuendamine keeruline) kui ka veel avastamata haavatavuste exploitide vastu. <noindex><a rel=\"nofollow\" href=\"https:\/\/bitbucket.org\/Adam_pi3\/lkrg-main\/src\/master\/\">GNU \u00dcldine Avaliku litsentsi alusel.<\/a><\/noindex> GPLv2 litsentsi all.<\/p>\n<p>Uue versiooni muudatuste hulgas on:<\/p>\n<ul>\n<li class=\"l\">  Projekti LKRG positsioneerimine on muudetud, n\u00fc\u00fcd ei jagata seda eraldi s\u00fcsteemideks terviklikkuse kontrollimiseks ja exploitide rakendamise m\u00e4\u00e4ramiseks, vaid tutvustatakse \u00fchtse tootena r\u00fcnnakute ja terviklikkuse lahknevuste tuvastamiseks.\n<li class=\"l\">  Tagatud on \u00fchilduvus Linuxi kernidega versioonidest 5.3 kuni 5.7, samuti kernelitega, mis on ehitatud agressiivsete GCC optimeerimisega, ilma CONFIG_USB ja CONFIG_STACKTRACE valikuteta v\u00f5i CONFIG_UNWINDER_ORC valikuga, samuti kernidega, kus puuduvad LKRG funktsioonid, kui neid on v\u00f5imalik v\u00e4ltida.\n<li class=\"l\">  Kogumise k\u00e4igus kontrollitakse teatud kohustuslikke CONFIG_* tuuma seadeid, et genereerida arusaadavate veateadete asemel selged t\u00f5rketeated;\n<li class=\"l\">  Lisatud tugi ootere\u017eiimile (ACPI S3, suspend to RAM) ja une (S4, suspend to disk) re\u017eiimidele;\n<li class=\"l\">  Makefile'isse on lisatud DKMS-i tugi;\n<li class=\"l\">  K\u00e4ivitati eksperimentaalne tugi 32-bitistele ARM platvormidele (testitud Raspberry Pi 3 Model B-l). Varem olemas olnud AArch64 (ARM64) tugi on t\u00e4iendatud Raspberry Pi 4-le \u00fchilduvuse tagamiseks;\n<li class=\"l\">  \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 (hook), \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0432\u044b\u0437\u043e\u0432\u0430 capable() \u0434\u043b\u044f \u043b\u0443\u0447\u0448\u0435\u0433\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u0445 &#171;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.man7.org\/linux\/man-pages\/man7\/capabilities.7.html\">v\u00f5imed<\/a><\/noindex>&#171;, \u0430 \u043d\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.man7.org\/linux\/man-pages\/man7\/credentials.7.html\">credentials<\/a><\/noindex>);\n<li class=\"l\">  Pakutud on uus loogika nimede ruumide piirangutest (nt Docker konteineritest) v\u00e4ljumise katsete m\u00e4\u00e4ramiseks;\n<li class=\"l\">  x86-64 s\u00fcsteemides on tagatud SMAP (Supervisor Mode Access Prevention) bitide kontroll ja rakendamine, mis on m\u00f5eldud kasutajaruumi andmete kaitsmiseks privileegitud koodi juuresolekust, mis t\u00f6\u00f6tab tuumatasemel. SMEP (Supervisor Mode Execution Prevention) kaitse on varem ellu viidud;\n<li class=\"l\">  T\u00f6\u00f6tamise k\u00e4igus on LKRG seadistuste paigutamine saavutatud tavaliselt ainult lugemiseks m\u00f5eldud m\u00e4lulehe,\n<li class=\"l\">  Logides on info, mis v\u00f5ib olla k\u00f5ige kasulikum r\u00fcnnakute jaoks (n\u00e4iteks teave k\u00e4rnadi aadresside kohta), piiratud t\u00f5rketaseme (log_level=4 ja k\u00f5rgem) abil, mis on vaikimisi v\u00e4lja l\u00fclitatud.\n<li class=\"l\">  \u041f\u043e\u0432\u044b\u0448\u0435\u043d\u0430 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0438\u0440\u0443\u0435\u043c\u043e\u0441\u0442\u044c \u0411\u0414 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 &#8212; \u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0434\u043d\u043e\u0433\u043e \u0434\u0435\u0440\u0435\u0432\u0430 RB, \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0433\u043e \u043e\u0434\u043d\u0438\u043c spinlock, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0430 \u0445\u044d\u0448 \u0442\u0430\u0431\u043b\u0438\u0446\u0430 \u0438\u0437 512 \u0434\u0435\u0440\u0435\u0432\u044c\u0435\u0432 RB, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e 512 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430\u043c\u0438 \u0447\u0442\u0435\u043d\u0438\u044f-\u0437\u0430\u043f\u0438\u0441\u0438;\n<li class=\"l\">  Rakendatud ja vaikimisi lubatud re\u017eiim, kus protsessi identifikaatorite terviklikkuse kontrollimist teostatakse tihti ainult praeguse \u00fclesande jaoks ja valikuliselt aktiveeritavate (\u00e4rkava) \u00fclesannete jaoks. Muude \u00fclesannete puhul, mis on unere\u017eiimis v\u00f5i t\u00f6\u00f6tavad LKRG API-le kontrollitava kerniga sidumiseta, toimub kontroll harvemini.\n<li class=\"l\">  Uued sysctl ja mooduli parameetrid on lisatud LKRG t\u00e4psustamiseks, samuti kaks sysctl-i, et lihtsustada seadistamist arendajate ettevalmistatud peenh\u00e4\u00e4lestuskomplektide (profiles) valimise kaudu.\n<li class=\"l\">  Vaikeseaded on muudetud, et saavutada tasakaal j\u00e4lgimise ja reageerimise efektiivsuse ning j\u00f5udluse m\u00f5ju ja valeh\u00e4irete riski vahel.\n<li class=\"l\">  Systemd unit-fail on \u00fcmber t\u00f6\u00f6tatud LKRG mooduli laadimiseks varajases laadimisfaasis (mooduli keelamiseks saab kasutada kerneli k\u00e4skluse parameetrit).\n<\/ul>\n<p>\u0421 \u0443\u0447\u0451\u0442\u043e\u043c \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043d\u043e\u0432\u043e\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0439 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0438 LKRG 0.8 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 2.5% \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (&#171;heavy&#187;) \u0438 2% \u0432 \u043e\u0431\u043b\u0435\u0433\u0447\u0435\u043d\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 (&#171;light&#187;). <\/p>\n<p>Hiljuti korraldati <noindex><a rel=\"nofollow\" href=\"http:\/\/jultika.oulu.fi\/files\/nbnfioulu-202004201485.pdf\">uurimuses<\/a><\/noindex> LKRG paketide efektiivsuse anal\u00fc\u00fcs juurkomplektide tuvastamiseks.  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lists\/lkrg-users\/2020\/06\/14\/5\">n\u00e4idanud<\/a><\/noindex> parimaid tulemusi, ilma valeh\u00e4ireteta, tuvastades 8 9 testitud rootkitist, mis t\u00f6\u00f6tavad tuumatasemel (tuletati esile rootkitid Diamorphine, Honey Pot Bears, LilyOfTheValley, Nuk3 Gh0st, Puszek, Reptile, Rootfoo Linux Rootkit ja Sutekh, kuid j\u00e4eti v\u00e4lja Keysniffer, mis on tuumamooduli ja k\u00e4gija, mitte t\u00f5eline rootkit). V\u00f5rdluseks, paketid AIDE, OSSEC ja Rootkit Hunter tuvastasid 2 rootkitist 9-st, samas kui Chkrootkit ei tuvastanud \u00fchtegi. Samuti ei toeta LKRG kasutajaruumi pandud rootkitide tuvastamist, seega saavutatakse parim efektiivsus AIDE ja LKRG \u00fchendamise abil, mis aitas tuvastada 14 15-st k\u00f5igist t\u00fc\u00fcpidest rootkitidest.<\/p>\n<p>Lisaks v\u00f5ib m\u00e4rkida, et jaotuse arendaja <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51009\">Whonix<\/a><\/noindex> alustasin <noindex><a rel=\"nofollow\" href=\"https:\/\/www.whonix.org\/wiki\/Linux_Kernel_Runtime_Guard_LKRG\">koostamine<\/a><\/noindex> valmistatud pakettide DKMS jaoks Debianile, Whonixile, Qubesile ja Kicksecure'ile, ning pakett <noindex><a rel=\"nofollow\" href=\"https:\/\/aur.archlinux.org\/packages\/lkrg-dkms\/\">Arch Linuxis<\/a><\/noindex> on juba uuendatud versioonile 0.8. LKRG paketid on samuti saadaval Venemaa <noindex><a rel=\"nofollow\" href=\"https:\/\/packages.altlinux.org\/ru\/sisyphus\/srpms\/kernel-source-lkrg\">ALT Linux<\/a><\/noindex> ja <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52955\">Astra Linux<\/a><\/noindex>.<\/p>\n<p>LKRG-s toimimist kontrollitakse, v\u00f5rreldes praegust koodi ja tuuma ning moodulite andmeid, olulisi andmestruktuure ja CPU seadeid salvestatud hash'ide v\u00f5i vastavate m\u00e4lu, andmestruktuuride v\u00f5i registrite kopeerimisega. Kontrollid aktiveeruvad nii perioodiliselt ajastuse j\u00e4rgi kui ka erinevate s\u00fcndmuste toimumisel.<\/p>\n<p>V\u00f5imalike kuritarvituste m\u00e4\u00e4ramine ja r\u00fcnnakute blokeerimine toimub tuuma ressources'i juurdep\u00e4\u00e4su andmise eel\u00f5htul (n\u00e4iteks enne faili avamist), kuid p\u00e4rast pahatahtliku autoriseerimise saamist protsessi poolt (n\u00e4iteks UID vahetus). Kui protsesside volituste rikkumist tuvastatakse, l\u00f5petatakse need vaikes\u00e4tete kohaselt, mis on piisav paljude kuritarvituste blokeerimiseks.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53244\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430 LKRG 0.8 (Linux Kernel Runtime Guard), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u044f\u0434\u0440\u0430. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043c\u043e\u0434\u0443\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0435 \u044f\u0434\u0440\u043e \u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432). \u041c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u043a\u0430\u043a \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0434\u043b\u044f \u044f\u0434\u0440\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-86642","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430 LKRG 0.8 (Linux Kernel Runtime Guard), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u044f\u0434\u0440\u0430. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043c\u043e\u0434\u0443\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0435 \u044f\u0434\u0440\u043e \u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432). \u041c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u043a\u0430\u043a \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0434\u043b\u044f \u044f\u0434\u0440\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f LKRG 0.8 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430 LKRG 0.8 (Linux Kernel Runtime Guard), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u044f\u0434\u0440\u0430. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043c\u043e\u0434\u0443\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0435 \u044f\u0434\u0440\u043e \u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432). \u041c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u043a\u0430\u043a \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0434\u043b\u044f \u044f\u0434\u0440\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-27T17:42:50+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-27T17:42:50+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47LKRG 0.8 mooduli v\u00e4ljalase Linuxi tuuma haavatavuste \u00e4rahoidmiseks | ProHoster","description":"Openwalli projekt on avaldanud LKRG 0.8 (Linux Kernel Runtime Guard) kernelimooduli, mis on m\u00f5eldud tuvastama ja blokeerima r\u00fcnnakuid ning tuuma struktuuri terviklikkuse rikkumisi. N\u00e4iteks saab moodul kaitsta volitamata muudatuste tegemise eest t\u00f6\u00f6tavas tuumas ja kasutaja protsesside volituste muutmise katsete eest (eksploiteerimise tuvastamine). Moodul sobib nii juba tuntud tuuma eksploiteerimiste kaitse korraldamiseks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f LKRG 0.8 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442 Openwall \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430 LKRG 0.8 (Linux Kernel Runtime Guard), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u044f\u0434\u0440\u0430. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043c\u043e\u0434\u0443\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0435 \u044f\u0434\u0440\u043e \u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432). \u041c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u043a\u0430\u043a \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u0434\u043b\u044f \u044f\u0434\u0440\u0430","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/vypusk-modulya-lkrg-0-8-dlya-zashhity-ot-ekspluataczii-uyazvimostej-v-yadre-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-27T17:42:50+00:00","article:modified_time":"2020-06-27T17:42:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86642","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:11:04","updated":"2022-10-02 21:11:49"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/86642","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=86642"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/86642\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=86642"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=86642"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=86642"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}